Extracted admin endpoints from chain_vault.py (2,178 lines) into
wallet_admin.py (768 lines). chain_vault.py is now 1,469 lines.
What moved to wallet_admin.py (29 routes):
- API keys: /api-keys, /api-keys/revoke
- Alerts: /alerts, /alerts/delete
- Webhooks: /webhooks, /webhooks/{id}, /webhooks/{id}/test,
/webhooks/{id}/retry, /webhooks/deliveries
- Audit trail: /audit-trail
- Bulk ops: /bulk/filter, /bulk/delete, /bulk/export, /export
- 2FA: /admin/2fa/{setup,verify-setup,disable,status}
- Config: /config
- Proof of Generation: /proof/{commit,provenance,verify,roots,stats}
What stayed in chain_vault.py (32 routes):
- Chain metadata: /chains, /stats, /healthz, /health-score
- RPC config: /rpc-chains
- Wallet gen: /generate, /generate/batch, /generate/all,
/import, /from-mnemonic, /derive-address, /hd-wallet
- Vault CRUD: /vault, /vault/{id}, /vault/{id}/full, DELETE
- Wallet ops: /tree, /cluster, /rotate, /rotate-sweep, /rotations,
/distribute, /sweep, /escrow, /escrow/release, /paper-wallet, /tx
- Validation: /validate/{chain}/{address}, /validate/all
- Balances: /balances, /balances/snapshot
- PDF: /paper-wallet/{id}/pdf, /wallet/{id}/birth-certificate
Helpers extracted to _persistent_store.py:
- _PersistentStore class (webhooks/alerts/payments SQLite store)
P3-7 fix: removed dead _webhooks global references in test/retry
endpoints — now uses _PersistentStore.all('webhooks')
Added to wallet_admin.py:
- _require_totp() helper (also kept in chain_vault.py for the
/vault/{id}/full endpoint that needs it)
- WebhookCreateRequest, BulkFilterRequest, BulkDeleteRequest models
(these were inlined in original chain_vault.py body — now in
the request schemas section)
P3-10 — WP plugin supported_chains() rewritten
Plugin used to advertise chains the backend doesn't support
('bitcoin' vs backend 'btc', 'ethereum' vs 'eth', etc.). Rewrote
to use correct backend keys + added a 'backend' field for clarity.
Now matches ADDRESS_GENERATION.md truth table.
main.py: updated import + include_router for wallet_admin.router.
Test results: 80 passed, 5 skipped (no regressions).
Refs: AUDIT.md P2-16, P3-7, P3-10, P3-17
43 lines
1.2 KiB
Python
43 lines
1.2 KiB
Python
import os
|
|
import tempfile
|
|
|
|
import pytest
|
|
from fastapi.testclient import TestClient
|
|
|
|
os.environ["WP_VAULT_PASSWORD"] = "test-vault-password-1234567890"
|
|
os.environ["WP_DATA_DIR"] = tempfile.mkdtemp(prefix="wp_test_")
|
|
os.environ["WP_ADMIN_KEY"] = "test-admin-key-12345"
|
|
os.environ["WP_RATE_LIMIT"] = "0"
|
|
|
|
from core.config import cfg
|
|
cfg._vault_password = os.environ["WP_VAULT_PASSWORD"]
|
|
|
|
|
|
@pytest.fixture
|
|
def client():
|
|
from main import app
|
|
app.state.vault = None
|
|
app.state.key_store = None
|
|
app.state.audit = None
|
|
app.state.generator = None
|
|
app.state.proof = None
|
|
|
|
from core.auth import KeyStore
|
|
from core.vault import Vault
|
|
from core.audit import AuditLog as AuditTrail
|
|
from core.proof import ProofOfGeneration
|
|
from wallet_engine.generator import WalletGenerator
|
|
|
|
db_path = cfg.data_dir / "test.db"
|
|
app.state.vault = Vault(db_path)
|
|
app.state.key_store = KeyStore(cfg.keys_path)
|
|
app.state.audit = AuditTrail(cfg.audit_path)
|
|
app.state.proof = ProofOfGeneration(cfg.data_dir / "proof.db")
|
|
app.state.generator = WalletGenerator(vault_password=cfg.vault_password)
|
|
|
|
return TestClient(app)
|
|
|
|
|
|
@pytest.fixture
|
|
def admin_headers():
|
|
return {"X-API-Key": "test-admin-key-12345"}
|